Method, system, server and terminal for implementing secure transmission of data

Abstract

According to an embodiment of the present invention, a server divides data into multiple data segments, directly stores some of the data segments without encryption, and encrypts and stores the other data segments; the server receives, from the terminal, a download request of downloading the data, and sends the unencrypted data segments to the terminal; and the server receives an identity authentication request sent by the terminal, performs identity authentication on the terminal, and sends the encrypted data segments to the terminal after the identity authentication succeeds.

What is claimed is: 
     
       1. A method for implementing secure transmission of data,
 comprising: 
 dividing, by a server, data into multiple data segments, directly storing some of the data segments without encryption, and encrypting and storing the other data segments; 
 receiving, by the server from a terminal, a download request of downloading the data, and sending the unencrypted data segments to the terminal; 
 receiving, by the server, an identity authentication request sent by the terminal, performing identity authentication on the terminal; 
 receiving and playing, by the terminal, the unencrypted data segments; 
 starting, by the terminal, a timer with a first expiration time length after sending the identity authentication request to the server; 
 determining, by the terminal when the timer with the first expiration time length expires, whether a response is received from the server, and if no response is received:
 sending the identity authentication request to the server again; 
 restarting the timer with a second expiration time length longer than the first expiration time length; and 
 determining by the terminal when the timer with the second expiration time length expires, whether the response is received, and if no response is received, sending the identity authentication request to the server again, 
 wherein the response is the encrypted data segments sent by the server or an authentication failure message; and 
 
 sending, by the server, the encrypted data segments to the terminal after the identity authentication succeeds. 
 
     
     
       2. The method according to  claim 1 , further comprising:
 receiving, by the server when the identity authentication fails, the identity authentication request that is sent by the terminal again before the terminal completes playing of the unencrypted data segments, and performing identity authentication on the terminal again; and sending the encrypted data segments to the terminal if the identity authentication succeeds. 
 
     
     
       3. The method according to  claim 1 , further comprising:
 sending a decryption key to the terminal after the identity authentication succeeds, so that the terminal decrypts the encrypted data segments by using the decryption key, and plays the decrypted data segments. 
 
     
     
       4. The method according to  claim 2 , further comprising:
 sending a decryption key to the terminal after the identity authentication succeeds, so that the terminal decrypts the encrypted data segments by using the decryption key, and plays the decrypted data segments. 
 
     
     
       5. The method according to  claim 1 , further comprising:
 playing, by the terminal, the unencrypted data segments again if the encrypted data segments sent by the server are still not received after the terminal completes playing of the unencrypted data segments. 
 
     
     
       6. A method for implementing secure transmission of data, comprising:
 sending, by a terminal to a server, a download request of downloading data, and receiving unencrypted data segments of the data that are sent by the server; 
 playing, by the terminal, the unencrypted data segments, sending an identity authentication request to the server; 
 starting, by the terminal, a timer with a first expiration time length; 
 determining, by the terminal when the timer with the first expiration time length expires, whether a response is receive from the server, and if no response is received:
 sending the identity authentication request to the server again; 
 restarting the timer with a second expiration time length longer than the first expiration time length; and 
 determining by the terminal when the timer with the second expiration time length expires, whether the response is received, and if no response is received, sending the identity authentication request to the server again, 
 wherein the response is the encrypted data segments sent by the server or an authentication failure message; and 
 
 after identity authentication on the terminal by the server succeeds, receiving encrypted data segments of the data that are sent by the server. 
 
     
     
       7. The method according to  claim 6 , further comprising:
 sending, by the terminal when the identity authentication fails, the identity authentication request to the server again before the terminal completes the playing of the unencrypted data segments, so that the server performs identity authentication on the terminal again, and if the identity authentication succeeds, sending the encrypted data segments to the terminal. 
 
     
     
       8. The method according to  claim 6 , further comprising:
 receiving, by the terminal, a decryption key sent by the server; and 
 decrypting, by the terminal, the encrypted data segments by using the decryption key, and playing the decrypted data segments. 
 
     
     
       9. The method according to  claim 6 , further comprising:
 playing, by the terminal, the unencrypted data segments again if the encrypted data segments sent by the server are still not received after the terminal completes playing of the unencrypted data segments. 
 
     
     
       10. A system for implementing secure transmission of data, comprising:
 a terminal comprising a first processor in communication with a first memory storing a first set of instructions executed by the first processor; and 
 a server comprising a second processor in communication with a second memory storing a second set of instructions executed by the second processor; 
 wherein the second processor, when executing the second set of instructions, is configured to cause the server to:
 divide data into multiple data segments, directly store some of the data segments without encryption, and encrypt and store the other data segments; 
 receive, from a terminal, a download request of downloading the data, and send the unencrypted data segments to the terminal; 
 receive an identity authentication request sent by the terminal, perform identity authentication on the terminal, and send the encrypted data segments to the terminal after the identity authentication succeeds; 
 
 wherein the first processor, when executing the first set of instructions, is configured to cause the terminal to:
 play the unencrypted data segments sent by the server; 
 start a timer with a first expiration time length after sending the identity authentication request to the server; 
 determine, when the timer with the first expiration time length expires, whether a response is received from the server, and if no response is received:
 send an identity authentication request to the server again; 
 restart the timer with a second expiration time length longer than the first expiration time length; and 
 determine when the timer with the second expiration time length expires, 
 whether the response is received, and if no response is received, send the identity authentication request to the server again, 
 wherein the response is the encrypted data segments sent by the server or an authentication failure message; and 
 
 play the unencrypted data segments again if the encrypted data segments sent by the server are still not received after the terminal completes playing of the unencrypted data segments.